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(57) In an online shopping service when orders are 
sent via a computer network, mistaken operations and 
unauthorized operations of buttons with economic con- 
sequences are prevented without affecting the freedom 
of users to make button operations that are unrelated to 
the ordering of products. Each sel of bullon dala in- 
cludes a control command and execution condition in- 
formation. The nonvolatile memory in a reproduction ap- 
paratus stores execution permission judging informa- 
tion that is used when judging whether the execution of 
control commands is permitted. When a button opera- 
tion has been made, the control unit refers to the exe- 
cution condition information of the selected button and 
the execution permission judging information, and then 
judges whether the execution of the control command 
corresponding to the button selected in the button oper- 
ation is permitted. 
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Description 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

[0001] The present invention relates to a reproduction 
apparatus with an ordering feature for electronically or- 
dering products. 

2. Description of the Background Art 

[0002] Systems that allow users to purchase goods 
via a computer network, which is to say, online shopping 
systems, are generally achieved by data communica- 
tion on a computer network between a purchaser termi- 
nal device and a server of the service provider. In such 
a system, the purchaser terminal device transmits an 
order which is received by the server of the service pro- 
vider. 

[0003] When purchasing a product, a user of an online 
shopping service does not need to input his/her name, 
to write a signature, or to settle the account in person. 
[0004] While the above description focuses on the 
fundamental aspects of online shopping, new services 
that are incorporated into satellite broadcasting systems 
have been proposed. 

[0005] Fig. 1A shows the construction of an online 
shopping system that is incorporated into a satellite 
broadcasting system. 

[0006] As shown in Fig. 1 A, the service provider trans- 
mits the broadcast wave 1101 to the user This broad- 
cast wave 1101 includes video images that introduce 
products on sale, audio for an accompanying explana- 
tion, and program information that includes a number of 
sets of button data. Each set of button data includes im- 
age data for displaying a button and various types of 
information. Buttons produced by the button data may 
be pressed by the user. The antenna 1 102 receives the 
broadcast wavo 1101 and sends it to the set-top box 
1104. The set-top box 1104 separates the data in the 
received broadcast wave 1101 into video information, 
audio information, and program information, decodes 
the various types of information, and outputs the decod- 
ing result. The TV set 1103 displays the decoded video 
images, while a speaker provided in the TV set 1103 
reproduces the decoded audio. 

[0007] Fig. 1 B shows a product ordering screen 1 202 
that is displayed on the TV set 1103. As shown in the 
drawing, the product ordering screen 1202 displays in- 
formation such as images: text and price for a product 
on sale. By operating the remote commander 1 1 05, the 
user can indicate up/down and left/right movement of a 
cursor, and so change any of the buttons displayed on 
the TV screen to a selection state. If the user presses 
the Enter key on the remote commander 1105 with one 
of the buttons in the selection state, the set-top box 1 104 
executes the command assigned to the selected button. 
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[0008] The buttons displayed on the screen include 
buttons for switching the display content of the screen 
(such as the "Previous" button 1 201 a and "Next" button 
1201b in Fig. 1B), and a button (the "Order" button 

s 1201c in Fig. 1B) for having the set-top box 1104 send 
a product order for the presently displayed product. The 
set-top box 1104 switches the display on the screen 
whenever the user presses the "Previous" button 1 20 1 a 
or "Next" button 1201b, so that the user is able to view 

10 information on a number of products until a desired 
product is found. This differs from television commer- 
cials that are unidirectionally broadcast with no consid- 
eration to the users tastes or interests, so that online 
shopping systems that are combined with satellite 

1$ broadcasting have more of a "magazine" feel to them. 
[0009] When the user presses the button provided for 
ordering a product, the set-top box 1104 refers to infor- 
mation such as the product identification number that is 
included in the button information in the broadcast wave 

20 and generates an order request. A modem device pro- 
vided in the set-top box 1104 then transmits the gener- 
ated order request to the service provider via a public 
network. 

[0010] The order receiving server 1107 provided at 
25 the service provider's facility receives the transmitted or- 
der form and stores in the database 1108. The service 
provider then refers to the order data in the database 
1108 and checks whether the ordered product is in 
stock, in which case the service provider can proceed 
30 to arrange the delivery of the product by a delivery serv- 
ice. If the ordered product is not in stock, the service 
provider will send an appropriate message to the set- 
top box 1104 of the consumer. 

[0011] When the ordered product is digitized music or 
35 another kind of digital product, the service provider bills 
the user for the required payment and then has the set- 
top box 1 1 04 download the digital product from the serv- 
ice provider order receiving server to provide the con- 
sumer with the ordered digital product. 
40 [0012] A first advantage of this kind of online shopping 
system is that service providers are able to use images 
and sound to promote the features of their products, and 
by doing so capture the attention of consumers. A sec- 
ond advantage of the system is that by enabling con- 
45 sumers to order products by the simple press of a but- 
ton, a large increase in the number of orders is ob- 
served. 

[0013] In more detail, service providers can make an 
appealing sales pitch using images and sound to gen- 

50 erate a consumer's interest in their products and, having 
just aroused the consumer's interest, display a button 
image that allows the consumer to purchase the prod- 
uct. As a result, consumers can be urged to buy a prod- 
uct and to order it without further consideration. In this 

55 way, online shopping services can increase the sale of 
products by making a psychologically skillful appeal to 
the consumer 

[0014] With the above online shopping system, how- 
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ever, the arousa) of a desire in the consumer to purchase 
the product coupled with the ease with which the product 
can be purchased may result in a large incidence of pur- 
chases being made without the consent of persons with 
the right to order (hereinafter, "authorized persons"). 
[0015] Here, the expression "authorized person" re- 
fers to the person who will settle the account when prod- 
ucts are purchased via a given set-top box 1104. This 
can equate to a subscriber of satellite broadcasting or 
a network, a registered person for a public network (e, 
g., telephone system), or the head of the household 
where the set-top box 1104 is installed. Orders made 
without the consent of the authorized person can be 
caused by mistakes made by the authorized person 
themself, or by unauthorized actions of persons aside 
from the authorized person, especially minors who are 
not being supervised by their parents. 
[001 6] To prevent orders being made without the con- 
sent of the authorized person, a system locking method 
may be provided for the set-top box 1104. This means 
that the authorized person may lock the set-top box 
1 1 04 in a non-active state, with activation of the set-top 
box 1104 only being possible after the authorized per- 
son has deactivated the lock. 

[0017] While the locking system described above is 
suitable for cash registers or business terminals, the set- 
top box 1104 is fundamentally a domestic appliance, so 
that the inability to view the products on sale without first 
having the authorized person deactivate the lock pro- 
vides a major limitation for the viewing of satellite broad- 
casting. This would also lead to a decrease in the ratings 
for satellite broadcasts. 

[0018] It would conceivably possible to provide a par- 
tial lock which, instead of locking the entire system, 
would only prevent unauthorized persons from making 
button operations. However, the digital data included in 
satellite broadcasts includes buttons for switching the 
display, such as the "Previous" button 1201a, and the 
"Next" button 1201b in Fig. 1B, with these buttons being 
used to roalizo the interactive display of video imagos 
by the system. To prohibit all button operations simply 
because one of the buttons is an order button results in 
the loss of the interactive nature of the display, and re- 
stricts the freedom with which users may use view the 
products on sale. 

[0019] As an alternative to a system locking method, 
it would conceivably be possible to use a stricter process 
for verifying the authority of the consumer whenever a 
product order is made. When the user tries to make a 
product order, the set-top box 1 1 04 could have the con- 
sumer enter the number of a credit card to be used for 
the payment, and then only proceed with the transmis- 
sion of the order if the user has entered the. correct 
number. Since ordering would not be possible without 
the input of the correct card number, this arrangement 
would be effective in preventing orders from being made 
without the consent of the authorized person. However, 
this would require the consumer to input the credit card 



number every time a purchase is made, even when in- 
expensive products are being ordered. Credit card num- 
bers are often composed of ten or more alphanumeric 
characters, so that input of such when making an order 

s can be troublesome. Should the user make mistakes 
while inputting the number via a ten-key pad, the frus- 
tration at doing so can lead to the user losing interest in 
the product, so that the user may end up deciding not 
to order For this reason, troublesome authentication 

10 processes that result in the user losing interest in prod- 
ucts can undermine the commercial value of such online 
shopping systems. 

SUMMARY OF THE INVENTION 

75 

[0020] It is a first object of the present invention to pi o- 
videa reproduction apparatus, which allows broadcasts 
to be freely viewed but prohibits orders from being made 
without the consent of an authorized person. 

20 [0021 ] It is a second object of the present invention to 
provide a reproduction apparatus that allows products 
to be ordered with a simple operation, but strictly pro- 
hibits the ordering of products without the consent of an 
authorized person. 

25 [0022] The first and second objects of the present in- 
vention can be achieved by a reproduction apparatus 
that reproduces digital data supplied by a business and 
transmits a product order to the business based on a 
user operation, the digital data including at least one irn- 

30 age relating to a product to be ordered, the reproduction 
apparatus including: a storage unit including a storage 
region that stores a permitted level showing an extent 
to which user operations are permitted by the reproduc- 
tion apparatus; a first receiving step for receiving a user 

35 operation made by the user; a reproducing unit for re- 
producing, when the user operation received by the first 
receiving unit relates to reproduction, an image included 
in the digital data based on the user operation; an ap- 
proving step for reading, when the user operation re- 

40 ceived by the first receiving step is a product ordering 
operation, the permitted level from the storage region 
and for judging whether to approve the product ordering 
operation based on the permitted level; and 
a product order transmitting unit for transmitting, only 

45 when the approving unit has approved the product or- 
dering operation, a product order to the business based 
on the product ordering operation. 
[0023] When a product order operation is made, 
transmission of the product order is only performed after 

so the approving unit has referred to the permitted level and 
approved the order. As a result, orders made against 
the wishes of the authorized person can be avoided, 
even when persons aside from the authorized person 
operate the reproduction apparatus. 

55 [0024] Since interactive operations such as the 
switching of displayed content are not subject to approv- 
al by the approving unit, persons aside from the author- 
ized person are free to have the video and audio includ- 
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ed in the digital data reproduced by the reproduction ap- 
paratus*. 

[0025] Here, the storage region in the storage unit 
may be in a locked state where rewriting is not possible, 
and the reproduction apparatus may further include: a 
judging unit for judging, when the user operation re- 
ceived by the first receiving unit is a rewriting operation 
for the storage region, whether a user who made the 
user operation is authorized; a second receiving unit for 
changing, when the judging unit has judged that the user 
is authorized, the storage region from the locked state 
to an unlocked state and receiving an operation setting 
a new permitted level; and a writing unit for writing, when 
the second receiving unit has received the new permit- 
ted level, the new permitted level into the storage region 
and then returning the storage region to the locked state. 
[0026] When the user changes the execution permis- 
sion judging information, the user has to make an oper- 
ation, such as the inputting of a PIN, that cannot be per- 
formed by other persons. As a result, the execution per- 
mission judging information cannot be changed by chil- 
dren or others through malevolence, thereby ruling out 
the possibility of unauthorized operations being made. 
[0027] Here, the digital data may include sets of but- 
ton data, each set of button data corresponding to a dif- 
ferent button to be displayed on an image included in 
the digital data, each set of button data including a con- 
trol command to be executed when the button corre- 
sponding to the button data is indicated, and one of the 
plurality of control commands Instructing the reproduc- 
tion apparatus to transmit a product order to the busi- 
ness, the reproduction unit including an arranging unit 
for arranging at least one button image onto an image 
included in the digital data, the first receiving unit includ- 
ing an indication receiving unit for receiving an indicating 
operation that indicates one of the buttons arranged by 
the arranging unit, the approving unit including a per- 
mission judging unit for referring to the permitted level 
and to a control content of the control command in a set 
of button data corresponding to a button imago indicated 
by the indicating operation, and for judging whether ex- 
ecution of the control command is permitted, and the 
product order transmitting unit only transmitting a prod- 
uct order to the business when the control command in 
a set of button data corresponding to a button image 
indicated by the indicating operation relates to an order 
and the permission judging unit has judged that execu- 
tion of the control command is permitted. 
[0028] With the stated construction, the ordering of 
products can be performed with the simple press of a 
button. As a result, consumers are able to quickly and 
easily order products that have been introduced using 
video and audio, before reconsidering the decision to 
buy. 

[0029] Here, the reproduction apparatus may further 
include: a holding unit for holding, when the permission 
judging unit judges that execution of a control command 
is not permitted, the control command; and a display unit 



3 788 A2 




for generating, when the judging unit judges that the in- 
putted PIN is correct and a new permitted level written 
into the storage region by the writing unit is higher than 
a previous permitted level, indications showing a prod- 

s uct ordering content of each control command held by 
the holding unit and displaying the generated indica- 
tions; and a third receiving unit for receiving, after the 
generated indications have been displayed, an opera- 
tion made by the user to approve an execution of one 

io of the control commands held by the holding unit, the 
product order transmitting unit transmitting, when the 
user has made an operation to approve a control com- 
mand held in the holding unit and the permission judging 
unit judges that execution of the control command is per- 

75 mitted, a product order to the business. 

[0030] With the stated construction, the authorized 
person is able to review the attempted product orders 
mad© by others and then determine whether to approve 
of such orders. This allows the authorized person to cen- 

20 sure the orders made by others. 

BRIEF DESCRIPTION OF THE DRAWINGS 

[0031 ] These and other objects, advantages and f ea- 
25 tures of the invention will become apparent from the fol- 
lowing description thereof taken in conjunction with the 
accompanying drawings which illustrate a specific em- 
bodiment of the invention. In the Drawings: 

30 Fig. 1A shows the construction of an online shop- 
ping system that is incorporated into a satellite 
broadcasting system; 

Fig. 1B shows the product ordering screen 1202 
displayed on the TV set 11 03; 
55 Fig. 2 shows the composition of the digital data; 

Fig. 3 shows examples of contents that are dis- 
played based on the video information in the digital 
data; 

Fig. 4 shows the data construction of the program 

40 stream and the button data; 

Fig. 5A shows an example of the button data that is 
set based on the display contents of Fig. 3; 
Fig. 5B shows the correspondence between the 
three-bit execution condition information and the 

45 parental levels; 

Fig. 6 shows an example setup where the reproduc- 
tion apparatus is set up in a household; 
Fig. 7 is a block diagram showing the configuration 
of the reproduction apparatus 21 in the first embod- 

so iment; 

Fig. 8A shows an example setting of the execution 
permission judging information; 
Fig. 8B shows the settings of whether execution of 
a control command is permitted or prohibited, de- 

55 pending on the various relationships between the 
execution condition information and execution per- 
mission judging information; 
Fig. 9 is a flowchart showing the processing in the 
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main procedure of the control unit 5 and the 
processing when the user tries to change the exe- 
cution permission judging information; 
Fig. 1 0 is a flowchart showing the processing when 
the user presses the Enter key with one of the but- s 
ton images in the selection state; 
Figs. 1 1 A to 11 D show the case where User B op- 
erates the remote controller 23 and presses the var- 
ious buttons for Case 2 shown in Fig. 8A; 
Figs. 12A to 12C show the case where User B op- 
erates the remote controller 23 and presses the var- 
ious buttons for Case 2 shown in Fig. SA; 
Figs. 1 3A to 1 3C show the case where User A op- 
erates the remote controller 23 and presses the var- 
ious buttons for Case 1 shown in Fig. 8A; 
Fig, 14 shows the configuration of the reproduction 
apparatus 21 in the second embodiment; 
Fig, 1 5 is a flowchart showing the processing of the 
control unit 5 in the second embodiment; 
Fig. 1 6 is a flowchart showing the processing of the 
control unit 5 when confirming a control command; 
Fig. 17 shows the display content when a product 
order indication has been confirmed by the author- 
ized person; 

Fig. 1 8 shows the configuration of the reproduction 
apparatus 21 in the third embodiment; and 
Fig. 1 9 is a graph showing an example of the eval- 
uation function. 

DESCRIPTION OF THE PREFERRED 
EMBODIMENTS 

First Embodiment 

[0032] The following is a description of the reproduc- 
tion apparatus of the present invention with reference to 
the drawings. 

Data Construction of the Digital Data 

[0033] The following description will first focus on the 
data construction of digital data that is reproduced by 
the reproduction apparatus. 

[0034] Fig. 2 shows the data construction of the digital 
data. As shown in the figure, the digital data includes 
the video information channels 1, 2 .... n, the audio in- 
formation channels 1, 2 n, and program information. 
These different kinds of information are multiplexed In 
frame units. The video information, audio information, 
and program information are extracted from each frame 
and combined for each channel by a reproduction ap- 
paratus, so that a video stream, an audio stream, and a 
program stream are generated in channel units. 
[0035] The video streams that are produced by this 
combining include video data that has been com- 
pressed according to MPEG2 (Moving Pictures Experts 
Group 2) methods. Fig. 3shows examples of the display 
content produced by displaying this video data. In this 



drawing, the video data is shown to include the menu 
image 71 for displaying the main menu, the news image 
72 for displaying sports news, the shopping image 73 
for introducing popular domestic appliances such as a 
digital camera, and shopping image 74. 
[0036] Buttons, such as the previous page button 1 2a 
for receiving a switching operation to the images on the 
previous page, the next page button 12b for receiving a 
switching operation to the images on the next page, the 
order button 12c for receiving an order, the catalog re- 
questing page 12d for receiving a request for catalog, 
the A channel switching button 13a, the B channel 
switching button 13b, the C channel switching button 
13c, are arranged on top of these pages. These button 
images are displayed using image data that is included 
in the program stream. 

[0037] Fig. 4 shows the data construction of the pro- 
gram and the button data. In this drawing, the top level 
shows the program information that is multiplexed in 
frame units, while the second level shows the program 
stream that is obtained by combining a plurality of sets 
of program intormation. 

[0038] The third level in Fig. 4 shows the inclusion of 
a plurality of sets of button data in the program stream. 
This third level shows that button data 1 , given as button 
data 1-1. 1-2, 1-3... 1-n, is repeatedly transmitted n 
times, while button data 2, given as button data 2-1 , 2-2, 
2-3 ... 2-n, is also repeatedly transmitted n times. 
[0039] The reason each set of button data is repeat- 
edly transmitted n times is that part of a set of received 
button data will be missing if the reproduction apparatus 
commences the reception process for the broadcast 
wave midway through the transmission of the button da- 
ta, or if the transmission conditions deteriorate during 
the transmission of the button data. Though there is the 
risk of such data loss, repeatedly transmitting the same 
button data ensures that the button data will be received 
at least once in its entirety. ; 

[0040] In the present embodiment, a separate set of 
button data is provided for each button image to be dis- 
played on the screen. 

[0041] The following is a description of the construc- 
tion of the button data which is shown on the fourth level 
of Fig. 4. The button data shown on the fourth level in- 
cludes a button number, button image data, a button dis- 
play x coordinate, a button display y coordinate, a button 
width, a button height, a button display time, a control 
command, and execution condition information. 
[0042] The button number is a serial number that is 
given to each button. 

[0043] The button image data is data obtained by sub- 
jecting computer graphics for drawing the button to run- 
length encoding. 

[0044] The button display x coordinate and button dis- 
play y coordinate is information indicating the x and y 
coordinates of the position at which the image data giv- 
en by the button image data may be displayed, with the 
top left comer of the screen as the origin (0,0). 
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[0045] The button width and button height show the 
size to de set on the screen for the image data showing 
the button image. 

[0046] The "button display time" shows the period for 
which the button image should be displayed on the 
screen, 

[0047] The control command is a command that 
should be executed by a reproduction apparatus on de- 
tecting that the button has been pressed. 
[0048] Fig. 5A shows example sets of button data for 
the display examples shown in Fig. 3. In these exam- 
ples, the three control commands, "LinkPrevPage", 
"LinkNextPage", and "Send" are given. In Fig. 5A, the 
"LinkPrevPage" command is a control command for in- 
structing the reproduction 'apparatus to switch the dis- 
play of video information to the previous page, while the 
"LinkNextPage" command is a control command for in- 
structing the reproduction apparatus to switch the dis- 
play of video information to the next page. 
[0049] When the LinkPrevPage command of the pre- 
vious page button 1 2a arranged at the top of the shop- 
ping image 73 shown in Fig. 3 is executed by the repro- 
duction apparatus, the reproduction apparatus switches 
the display from the shopping image 73 to the menu im- 
age 71, as shown by the arrow y4 drawn with a solid 
line. On the other hand, when the LinkNextPage com- 
mand of the previous page button 12b arranged at the 
top of the shopping image 73 is executed by the repro- 
duction apparatus, the reproduction apparatus switches 
the display from the shopping Image 73 to the shopping 
image 74, as shown by the arrow y2 drawn with a solid 
line. In the same way, execution of the LinkPrevPage 
and LinkNextPage commands included in other sets of 
button data results in the reproduction apparatus switch- 
ing the display between sets of video data, as shown by 
the arrows y3, y4, y5, and y6 drawn with a solid line. 
[0050] The command "IDc"+"Server_TELNO ,, is a 
command that instructs the reproduction apparatus to 
transmit the product code IDc for the product "personal 
computer" and the USER J D assigned to the authorized 
person for the reproduction apparatus to the destination 
given as the "Server_TELNO u . The command "Send 
"IDdVServer_TELNO\ meanwhile, is a command 
that instructs the reproduction apparatus to transmit a 
product catalog request code IDd and the USERJD as- 
signed to the authorized person for the reproduction ap- 
paratus to the destination given as the "Server_TEL. 
NO". The "Server_TEL.NO" is the telephone number of 
the service provider order reception server 6 shown in 
Fig. 7, so that the execution of these Send commands 
results in the product or catalog code and the USERJD 
being transmitted to the service provider order reception 
server 6 to start the order process. 
[0051] When a send command is executed to order a 
product, the service provider uses the USERJD trans- 
mitted by the send command to search a database for 
a credit card number or bank account number that has 
been registered with the service provider in advance. 



This means that the execution of a send command for 
an order request will result in the service provider with- 
drawing the required amount from the card account or 
bank account registered in the database. 
5 [0052] The execution condition information in each 
set of button data is information that stipulates condi- 
tions for the execution of the control command of the 
button data. Such conditions are required since the ex- 
ecution of a control command can equate to ordering of 
10 a product or entering into a commercial contract, mean- 
ing that there is a risk that unauthorized execution of the 
control command will adversely affect the authored 
person. Control commands with execution conditions 
stipulated by the execution condition information may 
is only be executed if the internal settings of the reproduc- 
tion apparatus comply to the stated conditions. 
[0053] In the present embodiment, the strictness of 
the conditions is expressed using a parental level (ab- 
breviated to "PL1 for example) which is a number given 
as one of n values. 

[0054] Fig. 58 shows the correspondence between 
3-bit execution condition information and parental lev- 
els. Here, the strictness of the execution condition infor- 
mation is expressed as a 3-bit parental level. The 3-bit 
information given here is converted into a parental level 
with a value from 0 to 7. Of these, the value 0 equates 
to when no parental level has been set. 
[0055] Low parental levels are set for button data 
where unauthorized execution of the control command 
has little or no effect on the authorized person. Con- 
versely, high parental levels are set for button data 
where unauthorized execution of the control command 
can have a significant adverse effect on the authorized 
person. 

[0056] The values between 1 and 7 should ideally rep- 
resent settings that correspond to the price range of the 
products to be ordered by a control command. A button 
used for ordering an inexpensive product should be set 
a low value as its parental level, while a button used for 
ordering an expensive product should be set a high val- 
ue as its parental level. Also, when the ordering of a 
product is subject to legal or other restrictions, such as 
when a legally binding procedure needs to be undertak- 
en by the authorized person, the button in question 
should be set a high value as its parental level. 
[0057] The following is an explanation of the genera- 
tion of button data, with reference to Fig. 5A, to complete 
the description of the button data. 
[0058] The previous page button 1 2a is positioned at 
the coordinates (10,10) at the top-left of the screen and 
has a width of 200 and a height of 50. Accordingly the 
button display X coordinate, the button display Y coor- 
dinate, the button width, and button height are respec- 
tively set at 10, 10, 200, and 5. The display period for 
the previous page button 12a is 10 seconds, so that the 
button display time is set at 10s. The control command 
for this button indicates a switching of the video infor- 
mation to the previous page. The execution of the con- 
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trol command for switching the displayed page will have 
no detrimental effect on the authorized person, so that 
the execution condition information is set at the low val- 
ue "1". 

[0059] The next page button 12b is also used for 
switching the displayed page. The next page button 12 
is a button image for switching to the display to next 
page of video Information, so that once again execution 
of this command will have no detrimental effect on the 
authorized person. Accordingly, the execution condition 
information is set at the low value "1\ 
[0060] In the present example, the order button 12c 
and catalog requesting page 12d are provided as but- 
tons related to the ordering of products. 
[0061] The control command that is associated with 
the catalog requesting page 12d transmits a request to 
the service provider for a product catalog. The ordering 
of catalogs ie usually free for consumers, though such 
action often results in companies obtaining personal in- 
formation about the consumer. This risk of the personal 
information being obtained by third parties means that 
the ordering of a catalog may have a detrimental effect 
on the authorized person. Accordingly, the consent of 
the authorized person should be sought when action is 
taken, meaning that the execution condition information 
is set at "3". 

[0062] The order button 1 2c is the button for ordering 
an expensive product, so that execution of the control 
command associated to this button carries the risk that 
a large sum wilt be withdrawn from the authorized per- 
son's account. This amounts to significant harm to the 
authorized person, so that it is essentia! for the author- 
ized person to consent to the execution of this com- 
mand. As a result, the execution condition information 
is set at "5". 

Configuration of the Reproduction Apparatus 

[0063] The following is a description of a reproduction 
apparatus that rcproducos digital data that has tho data 
construction described above. Fig. 6 shows an example 
where such reproduction apparatus is provided in a 
household. In this example, the antenna 20 receives the 
broadcast wave and outputs it to the reproduction ap- 
paratus 21. The reproduction apparatus 21 then dis- 
plays the video images and button images of Fig. 3 on 
the TV set 22. 

[0064] The remote controller 23 has cursor keys for 
changing one of the buttons to the selection state, an 
Enter key for confirming the button that is in the selection 
state, numeric keys for performing numeric input, and a 
Change key for indicating that the execution permission 
judging information (described later) is to be changed. 
The remote controller 23 sends an infrared signal show- 
ing a key code to the reproduction apparatus 21. The 
"pressing" of a button displayed on the screen of the TV 
set 22 is performed by indicating the button in question 
using the cursor keys provided on the remote controller 



23 and then confirming the selection by pressing the En- 
ter key on the remote controller 23. 
[0065] When a button has been indicated using the 
cursor keys, the button will be displayed using a different 

5 color to the other buttons. This state whereby the display 
color of the button changes to attract the attention of 
users is called the selection state, with buttons that are 
not In the selection state being in a standard state. 
[0066] The modem 24 transmits an order request sig- 

10 nal to the service provider order reception server 6 when 
a user has pressed the order button. 
[0067] In Fig. 6, the reproduction apparatus 21 is a 
domestic appliance that is located in the home of User 
A. As part of the subscription contract that User A has 

is signed with a provider of satellite broadcasting, when a 
product is ordered using the reproduction apparatus 21 , 
User A is obliged to settle the payment for the product, 
making User A the authorized person in this example. 
However, persons aside from User A are able to operate 

20 the reproduction apparatus 21 located in User A's home. 
Examples of such persons are User B, who is User A's 
son, and User C, who is User A's friend. 
[0068] The following is a description of the reproduc- 
tion apparatus 21 . Fig. 7 is a block diagram showing the 

25 configuration of the reproduction apparatus 21 in this 
first embodiment of the present invention. 
[0069] The reproduction apparatus 21 of Fig. 7 in- 
cludes a multiplexed data separation unit 1 , a reproduc- 
tion output unit 2, a remote controller reception unit 3, a 

30 non-volatile memory 4, a control unit 5, a modem 24, 
and a data bus. 

[0070] The multiplexed data separation unit 1 sepa- 
rates video information, audio information, and button 
data from the broadcast wave transmitted by the service 
25 provider. 

[0071] The reproduction output unit 2 includes a video 
decoder 2a and an audio decoder 2b which respectively 
decode the video information and audio information 
separated by the multiplexed data separation unit 1 . The 

40 decoding result of tho vidoo decodor 2a is outputtcd to 
the video input terminals of the TV set 22, while the de- 
coding result of the audio decoder 2b is outputted to the 
audio input terminals of the TV set 22. 
[0072] The remote controller reception unit 3 detects 

45 presses of the various keys on the remote controller 23, 
and outputs a key code for a key that has been pressed 
to the control unit 5. 

[0073] The non-volatile memory 4 includes an execu- 
tion permission judging information storing region 4a for 

50 storing execution permission judging information and a 
button data storing region 4b for storing button data. The 
execution permission judging information is information 
showing a permitted level that is set in the reproduction 
apparatus 21 by the authorized person. In the present 

55 embodiment, the permitted level is expressed using a 
parental level (abbreviated to "PL2") which is a numeric 
value expressed as one of n values. 
[0074] Fig. 8B shows the settings of whether execu- 
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tion of a control command is permitted or prohibited de- 
pending on the various relationships between the exe- 
cution condition information and execution permission 
judging information. 

[0075] When the parental level PL1 that is given as 5 
the execution condition information is higher than the 
parental level PL2 given as the execution permission 
judging Information, the control unit 5 judges that the 
internal settings of the reproduction apparatus 21 do not 
satisfy the condition of the execution condition informa- 
tion, so that the control unit 5 prohibits the execution of 
the control command included in the same set of button 
data as the execution condition information. When the 
parental level PL1 given as the execution condition in- 
formation is not higher than the parental level PL2 given 
as the execution permission judging information, the 
control unit 5 judges that the internal settings of the re- 
production apparatus 21 satisfy the condition of the ex- 
ecution condition information. Accordingly, the control 
unit 5 permits the execution of the control command in 
question. 

[0076] The execution permission judging information 
storing region 4a can be locked in a state where its con- 
tent cannot be amended by setting a personal identifi- 
cation number (hereinafter, "PIN") in the reproduction 
apparatus 21. The execution permission judging infor- 
mation storing region 4a remains in this locked state un- 
til a user inputs the correct PIN. When the user inputs 
the correct PIN, the lock is removed from the execution 
permission judging information storing region 4a, so that 
the user may then change the value of the parental level 
PL2, before locking the execution permission judging in- 
formation storing region 4a once more. 
[0077] Fig. 8A shows example settings of the execu- 
tion permission judging information. 
[0078] Case 1 in Fig. 8A shows the setting of the ex- 
ecution permission judging information for when User A 
is present. In Case 1 . the ordering of products can be 
performed under the authority of User A, so that the ex- 
ecution permission judging information is set at the high- 
est possible value "7". 

[0079] Case 2 in Fig. 8 A shows the setting of the ex- 
ecution permission judging information for when User A 
is absent but User B is present. In such a situation, the 
absence of User A may lead to User B misusing the re- 
production apparatus 21 and ordering products that are 
not wanted by User A. As a result, the execution per- 
mission judging information is set at a low value, such 
as "2", for Case 2 where User A is absent and User B 
is present. 

[0080] Case 3 in Fig. 8A shows the setting of the ex- 
ecution permission judging information for when User A 
is absent but User C is present. In this situation, there 
is the risk that User C will order products without the 
consent of User A. As a result, the execution permission 
judging information is set at a low value : such as "3", for 
Case 3 where User A is absent and User C is present. 
[0081] By setting the execution permission judging in- 



formation in this way, the authorized person User A may 
prevent Users B and C from making unwanted orders 
during his absence. 

[0082] The modem 24 transmits a variety of informa- 
tion, such as product orders, via a public network to the 
service provider order receiving server 6. 
[0083] The control unit 5 includes a ROM storing a 
control program and a RAM that is used as a work area 
for executing the control program. By executing the con- 
trol program, the reproduction apparatus 21 can perform 
the operations (1) to (7) described below. 

(1) Data separation operations that separate video 
information, audio information, and button data 
from the digital data. 

(2) Video reproduction control operations that re- 
produce video images by controlling the video de- 
coder 2a with the video information and button in- 
formation as inputs. 

(3) Audio reproduction control operations that re- 
produce audio by controlling the audio decoder 2b 
with the audio information and button information 
as inputs. 

(4) Button data storing operations that store the 
control command and execution condition informa- 
tion of a set of button data in the button data storing 
region 4b. 

(5) Execution permission judging operations that re- 
fer to the execution condition information and exe- 
cution permission judging information when a but- 
ton has been selected for execution by the remote 
controller 23, and then judge whether the execution 
of a control command is permitted. 

(6) Execution permission judging information 
changing operations that only allow the execution 
permission judging information to be changed when 
the correct PIN has been inputted. 

(7) Control command execution operations that 
control the various components of the reproduction 
apparatus 21 based on a control command. 

Video Reproduction Control Operations and Audio 
Reproduction Control Operations 

[0084] The following is a description of the operation 
of the reproduction apparatus 21 which will first focus 
on image reproduction control operations and audio re- 
production control operations. 

[0085] The control unit 5 first takes the button data 
from the program stream separated from the received 
digital data by the multiplexed data separation unit 1 and 
temporarily stores the button data in the non-volatile 
memory 4. Next, the control unit 5 controls the video de- 
coder 2a to display the sub-pictures included in button 
data as buttons on the screen for only the indicated dis- 
play time. 

[0086] Once the indicated display time has elapsed, 
the control unit 5 controls the video decoder 2a to stop 
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the display of the buttons and at the same time deletes 
the temporarily stored button data. 
[0087] The control unit 5 also has the video informa- 
tion separated trom the digital data outputted to the vid- 
eo decoder 2a. The video decoder 2a decodes the video 
data that has been compressed according to MPEG2 
methods and so produces video images. The control 
unit 5 also controls the video decoder 2a to superimpose 
the button images onto the video images and finally gen- 
erates an NTSC (National Television Standards Com- 
mittee) video signal which it outputs to the TV set 22. 
The TV set 22 receives the NTSC video signal and dis- 
plays video images on its screen. 
[0088] In the same way as the video information, the 
audio information separated from the digital data in- 
cludes audio that has been compressed according to 
LPCM (Linear Pulse Code Modulation) methods. The 
control unit 5 has this compressed audio data sent to 
the audio decoder 2b. The audio decoder 2b processes 
the compressed audio data according to LPCM meth- 
ods to convert it into an audio output signal which it out- 
puts to the speaker in the TV set 22. The speaker then 
performs audio output based on the received audio sig- 
nal. 

[0089] The following is an explanation of the process- 
ing of the control unit 5 in response to user operations 
of the remote controller 23 of the reproduction apparatus 
21 , with reference to the flowcharts in Figs. 9 and 10. 

Main Flow 

[0090] Fig. 9 is a flowchart showing the main process- 
ing of the control unit 5 and the processing when a user 
attempts to change the execution permission judging in- 
formation. In step S203, the control unit 5 monitors 
whether a key operation has been made. If so, in steps 
S205 to S207 the control unit 5 judges whether the 
pressed key is the Enter key, the Change key or one of 
the cursor keys. When the pressed key is one of the cur- 
sor keys, in step S208 the control unit 5 changes the 
button image indicated by the cursor operation to the 
selection state, before returning to step S203 and wait- 
ing for the next key operation. By changing the button 
image which is in the selection state in step S208, the 
user is able to set his/her desired button into the selec- 
tion state by pressing the cursor keys. 

Processing When Changing the Execution Permission 
Judging Information 

[0091] When user presses the Change key on the re- 
mote controller 23 to change the parental level PL2 with 
any of the button images in the selection state, the con- 
trol unit 5 makes the judgement "Yes" in step S206 and 
proceeds to step S209. In step S209, the control unit 5 
checks the setting state of the PIN. If no PIN has been 
registered, the user is free to change the parental level 
PL2, so that the processing advances straight to step 



S212 where the parental level is changed. When a PIN 
has been registered, the processing first proceeds to 
step S210 where the user is asked to input the PIN. The 
user inputs the PIN using the numeric keys on the re- 
s mote controller 23. This inputting of the PIN in step S210 
is performed to prevent other persons or children from 
changing the set parental level. 
[0092] In step S21 1, the control unit 5 compares the 
inputted PIN with the registered PIN to see whether they 
io match. If so, the processing advances to step S212 to 
allow the user to change the-set parental level PL2, in 
the same way as when no PIN has been registered. 
Once the user has finishing changing the set parental 
level PL2, the control unit 5 removes the lock from the 
is execution permission judging information storing region 
4a, writes the amended execution permission judging 
information into the execution permission judging infor- 
mation storing region 4a, and then locks the execution 
permission judging information storing region 4a. 
20 [0093] When the inputted PIN does not match the reg- 
istered PIN, the control unit 5 advances to step S213 
where a message showing that inputted PIN is incorrect 
is displayed. Once incorrect PINs have been inputted a 
number of times, the input of the PIN is terminated and 
25 the processing in this flowchart ends. 

Processing When a Button is Selected 

[0094] Fig. 10 is a flowchart showing the processing 
30 when the user presses the Enter key with one of the but- 
tons in the selection state. 

[0095] When the user presses the Enter key with one 
of the buttons in the selection state, in step S801 the 
control unit 5 reads the button data corresponding to the 
35 button image that is in the selection state and proceeds 
to step S802. In step S802, the control unit 5 judges 
whether execution condition information (=parental lev- 
el PL1 ) is present for the selected button. When the pa- 
rental level PL1 is zero showing that no execution con- 
40 dition has been set, the control unit 5 will immediately 
proceed to step S805 where it executes the control com- 
mand corresponding to the selected button. On the oth- 
er hand, when the parental level PL1 is a non-zero val- 
ue, this means that a parental level has been set as an 
45 execution condition, so that in step S803 the control unit 
5 judges whether execution permission judging informa- 
tion (=parental level PL2) is present in the non-volatile 
memory 4. 

[0096] When no execution permission judging infor- 
so mation is present in the execution permission judging 
information storing region 4a, the control unit 5 immedi- 
ately executes the control command corresponding to 
the selected button. On the other hand, when execution 
permission judging information has been set, the control 
55 unit 5 compares the execution condition information with 
the execution permission judging information and so 
judges in step S804 whether the execution of the corre- 
sponding control command is permitted. When making 
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this judgement, the control unit 5 compares the parental 
level PL1 given in the execution condition information 
with the parental level PL2 given in the execution per- 
mission judging information. When PL1 is greater than 
PL2, the control unit 5 judges that the internal settings 
of the reproduction apparatus 21 are insufficient for the 
execution of the control command. Conversely, when 
PL1 Is equal to or less than PL2, the control unit 5 that 
the reproduction apparatus 21 executes the control 
command. As a result, the corresponding control com- 
mand is only executed in step S805 if the condition in 
the execution condition information is satisfied. 
[0097] Control commands are executed by the control 
unit 5 and can result in control of the video decoder 2a, 
the audio decoder 2b, or the modem 24. In particular, 
when the control command is for the transmission of an 
order, execution of such control command results in da- 
ta for ordering the displayed product being transmitted 
to the service provider order receiving server 6 via the 
public network. 

[0098] The service provider makes the necessary ar- 
rangements based on the received information and bills 
the credit card or bank account which has been regis- 
tered by the user in advance. When the ordered product 
is a physical item, the service provider arranges for its 
delivery. When the ordered product is digitized music or 
another kind of digital product, the service provider bills 
the user for the required payment and then has the re- 
production apparatus 21 download the digital product 
from the service provider order receiving server 6, there- 
by providing the user with the ordered digital product. 

Operation When a Button has been Pressed 

[0099] The following is a description of the operation 
of the reproduction apparatus 21 when a button on the 
screen has been pressed. 

[0100] Figs. 11A to 11D correspond to Case 2 shown 
in Fig. 8A, and show User B pressing the various keys 
on the remote controller 23 and the pressing of a button 
on the screen, 

[0101] As shown in Fig. 11 A, the menu image 71, the 
A channel switching button 1 3a, the B channel switching 
button 1 3b, and the shopping channel switching button 
13c are displayed on the screen. In Fig. 11 B, User B 
makes a key operation on the remote controller 23 and 
so presses the shopping channel switching button 13c. 
In Case 2, the execution permission judging information 
is set at the parental level "2". In the present example, 
the execution control information in each set of button 
data for the A channel switching button 13a, the B chan- 
nel switching button 13b, and the shopping channel 
switching button 1 3c is the parental level "1 ' , so that the 
execution of the control commands associated to these 
buttons is permitted by the execution permission judging 
information of "2". As a result, the execution of the con- 
trol command included in the button data for the shop- 
ping channel switching button 13c is permitted. 
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[01 02] Since the execution of the control command is 
permitted, the displayed content switches from the 
menu image 71 to the shopping image 73 shown in Fig. 
11C. As shown in Fig. 11 C, the above remote controller 

s 23 operation results in the shopping image 73, the pre- 
vious page button 12a, the next page button 12b, the 
order button 12c, and the catalog requesting page 12d 
being displayed. If the remote controller 23 operation 
shown in Fig. 11 D results in the next page button 12b 

10 being pressed, the displayed content switches from the 
shopping image 73 to the shopping image 74 shown in 
Fig. 11E. 

[01 03] Figs. 1 2A to 1 2C correspond to Case 2 shown 
in Fig. 8A, where User B uses the remote controller 23 

is to press the various buttons on the screen. 

[0104] In Fig. 12A, the shopping image 73, the previ- 
ous page button 12a, the next page button 12b, the or- 
der button 1 2c, and the catalog requesting page 1 2d are 
displayed, with the order button 12c being set in the se- 

20 lection state. In this state, User B makes a remote con- 
troller 23 operation to press the order button 12c, as 
shown in Fig. 12B. 

[0105] In Case 2, the execution permission judging in- 
formation is parental level "2", while the execution con- 

25 dition information in the button data of the order button 
1 2c is the parental level "7". Here, the control unit 5 judg- 
es that the execution of the control command in the but- 
ton data with the execution control informationV" is be- 
yond the execution permission judging information "2", 

30 and so prohibits the execution of this control command. 
As shown in Fig. 12C, the reproduction apparatus 21 
displays a message showing why the control command 
cannot be executed. 

[0106] Figs. 1 3A to 1 3C correspond to Case 1 in Fig. 

35 8A, and so show the case when User A operates the 
remote controller 23 to press the order button 12c. 
[0107] In Fig. 13A, the shopping channel switching 
button 1 3c is in the selection state, and in Fig. 1 3B User 
A uses the remote controller 23 to confirm the selection 

^0 of this button. Since User A is present, the execution 
permission judging information is set at the highest pa- 
rental level "7", as shown in Fig. 8A. As a result, even if 
the execution condition information of the button data is 
"7", this will still be within the execution permission judg- 

^5 ing information, so that the product can be ordered as 
a result of the corresponding control command. As 
shown in Fig. 1 3C, a message confirming that the order 
has been sent is then displayed. 
[0108] In the above embodiment, a control command 

50 written in a set of button data is not executed as soon 
as the user selects the button. First, the control unit 5 
compares the execution condition information given in 
the button data with the execution permission judging 
information in the non-volatile memory 4 and performs 

55 a judgement to see whether the execution of the control 
command is permitted. By doing so, it is possible to pre- 
vent orders from being made by other persons against 
the wishes of the authorized person. 
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Seconcf Embodiment 

[0109] In the first embodiment, the product ordering 
indications made when the internal settings of the repro- 
duction apparatus 21 do not satisfy the execution con- 
dition information are instantly rejected. In this second 
embodiment, meanwhile, such product ordering indica- 
tions are stored and may be later approved by the au- 
thorized person. 

[0110] Fig. 14 shows the construction of a reproduc- 
tion apparatus 21 that is capable of storing product or- 
dering indications for later approval. The reproduction 
apparatus 21 shown in Fig. 14 differs from that of the 
first embodiment in that the non-volatile memory 4 fur- 
ther includes an execution indication information storing 
region 4c. The processing of the control units when the 
user has pressed a button is also different, as shown in 
Fig. 15. The flowchart in Fig. 15 differs from that of Fig. 
10 in that step S1006 has been newly added. 
[0111] When, in the flowchart in Fig. 10, the internal 
settings of the reproduction apparatus 21 do not satisfy 
the execution condition information, the control com- 
mand included in the button data subjected to a selec- 
tion operation was simply not executed. In the flowchart 
of Fig. 15, however, when the pressed button whose 
control command cannot be executed is the order button 
12c, details of the pressing of the order button 12c are 
stored as a "product ordering indication" in the execution 
indication information storing region 4c. If such product 
ordering indications are stored in the execution indica- 
tion information storing region 4c, the authorized person 
is then able to later judge whether the products indicated 
by the stored control commands should be ordered. 
[0112] In the first embodiment, the processing returns 
to step S203 after the execution permission judging in- 
formation (parental level PL2) has been changed in step 
S212, while in the second embodiment, the processing 
proceeds to step S301 after the processing in step 
S212. Fig. 16 is a flowchart showing the processing of 
the control unit 5 when confirming the stored control 
commands. 

[0113] In step S301 . the control unit 5 judges whether 
button data with a parental level PL1 that is higher than 
the parental level PL2 before changing but equal to or 
lower than the parental level PL2 after changing is 
present in the execution indication information storing 
region 4c. In step S302, the control unit 5 generates a 
plurality of attempted product orders showing the at- 
tempted ordering operations based on the control com- 
mands of sets of button data whose parental level PL1 
is tower than the parental level PL2 after changing. The 
control unit 5 has these attempted product orders dis- 
played as a vertical list. After this, the control unit 5 ad- 
vances to step S303 and waits for a key operation to be 
made. 

[0114] Fig. 17 shows the display content when the au- 
thorized person is asked to approve an attempted prod- 
uct order. When the processing of the control'unit 5 in 



the flowchart of Fig. 16 advances to step S302, the re- 
production apparatus 21 displays the message "THE 
FOLLOWING ATTEMPTED PRODUCT ORDER WAS 
MADE AT THE STATED TIME. DO YOU ACCEPT THIS 
5 ORDER?" on the TV set 22, as shown by arrow jl in Fig. 
17. The control unit 5 reads the button data stored in the 
execution indication information storing region 4c and 
the time at which the execution of the control command 
of the button data was attempted. Here, the read button 
data includes the Send command "Send 
•|Dc'+Server_TEL_NO." for ordering the product with 
the product code "IDc", so that the product code "IDc" 
is converted to the product name "Personal Computer" 
which is then displayed with the read information as an 
attempted product order, as shown by the arrow j2. 
[0115] When a key operation is made, the control unit 
5 judges in steps S305 to S308 whether the pressed key 
was respectively the Enter key, the Delete key, the Stop 
key, or one of the cursor keys. If the pressed key is one 
of the cursor keys, the attempted product order that is 
indicated by the cursor key operation is set into the se- 
lection state in step S309, before the processing returns 
to step S303 where a key operation is awaited once 
more. By changing the attempted product order that is 
in the selection state in step S309, the authorized per- 
son is able to set his/her desired attempted product or- 
der into the selection state. 

[0116] When the authorized person has pressed the 
Enter key, the control unit 5 judges "Yes" in step S305 
and the processing advances to step S304 where the 
control command corresponding to the attempted prod- 
uct order in the selection state is executed. 
[0117] When the authorized person has pressed the 
Delete key, the control unit 5 judges "Yes" in step S306 
and the processing advances to step S310 where the 
product ordering indication corresponding to the at- 
tempted product order in the selection state is deleted 
from the execution indicatiominformation storing region 
4c. 

[0118] When the authorized person has pressed tho 
Stop key, the control unit 5 judges "Yes" in step S307 
and the processing in this flowchart ends. 
[0119] For the display content in Fig. 17, if the user 
presses the Enter key, the attempted product order will 
be approved and the Send command described above 
will be sent to the service provider order receiving server 
6. 

[0120] With the present embodiment, when a judge- 
ment results in the execution of a control command not 
being performed, a product ordering indication can be 
temporarily stored to allow the authorized person to 
judge whether the product should be ordered. As one 
example, this means that products ordered by children 
may be monitored by their parents who can then order 
and pay for only the products they approve of. 
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Third Embodiment 

[0121] In the first and second embodiments, online 
shopping is performed using a broadcast wave, though 
in this third embodiment online shopping is performed 
using an optical disc. Fig. 18 shows the internal config- 
uration of the reproduction apparatus 21 in this third em- 
bodiment. As shown In the drawing, the reproduction ap- 
paratus 2 1 includes the disc drive 7 for loading an optical 
disc and the clock unit 8 for measuring the present time. 
The disc drive 7 reads digital data recorded on the op- 
tical disc using an optical pickup. 
[0122] In addition to the digital data described in the 
first embodiment, the optical disc also records time in- 
formation. This time information shows the sale period 
for each product, which is to be compared with the 
present time measured by the clock unit 8 provided in 
the reproduction apparatus 21. When the present time 
measured by the clock unit 8 is within the sale period in 
the time information, the execution permission judging 
information is set as "execution permitted". Conversely, 
when the present time measured by the clock unit 8 is 
outside the sale period in the time information , execution 
of the control commands corresponding to the button 
data is prohibited no matter what execution permission 
judging information is stored in the execution permission 
judging information storing region 4a. 
[0123] This means that in addition to checking the ex- 
ecution permission judging information against the ex- 
ecution condition Information during the sale period of 
a product to judge whether execution of a control com- 
mand is permitted, the control unit 5 unconditionally pro- 
hibits the execution of all control commands outside the 
sale period. 

[0124] With the present embodiment, when an au- 
thorized person has obtained an optical disc but the sale 
period of a product on the optical disc has ended, the 
screen for ordering the product will not be mistakenly 
displayed when reproducing the digital data recorded on 
tho optical disc. 

Fourth Embodiment 

[01 25] The fourth embodiment is a modification of the 
first and second embodiments where the sets of button 
data do not include execution condition information. In 
this fourth embodiment, the evaluation function f(x) is 
used for each set of button data in place of the execution 
condition information provided for each set of button da- 
ta. 

[0126] Fig. 19 is a graph showing an example of an 
evaluation function f(x). In Fig. 19, the button numbers 
have been shown as the x axis, while the output values 
y of the evaluation f(x) have been shown as the y axis. 
In this case, sets of button data with higher button num- 
bers correspond to higher output values. This output val- 
ue is the parental level PL1, and the straight line y=a 
shows the parental level PL2 that is stored as the exe- 
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cution permission judging information. 
[0127] As shown in Fig. 19, the output value y of the 
evaluation function f(x) corresponds to the parental level 
PL1, so that on detecting that a button has been 

s pressed, the control unit 5 in the fourth embodiment cal- 
culates the function y=f(x) with the button number of the 
detected button as the variable x. After this, the control 
unit 5 checks whether the output value y of the calculat- 
ed function is above the parental level PL2. By calculat- 

10 ing the evaluation function f(x) with the button number 
of the detected button as the variable x ; the control unit 
5 can judge whether the execution of the control com- 
mand associated to the detected button is permitted or 
prohibited. 

is [0128] With this fourth embodiment, if evaluation 
function information that shows the evaluation function 
for sets of button data is transmitted, the reproduction 
apparatus 21 will then be able to calculate the output 
value of the evaluation function and so judge whether 

20 the execution of control commands is permitted or pro- 
hibited. By doing so, execution condition information 
does not need to be provided for each set ot button data, 
so that the total amount of data to be transmitted can be 
reduced. By setting the evaluation function in advance, 

25 the total amount of data to be transmitted can be further 
reduced. 

[0129] The present invention has been explained with 
reference to the above four embodiments, though these 
embodiments merely explain potential systems that are 
30 presently expected to be of use. It should be remem- 
bered that modifications of these embodiments are pos- 
sible without departing from the scope of the invention. 
Modifications (a) : (b), (c), ... are given as examples be- 
low. 

35 

(a) The execution permission judging information 
storing region 4a, button data storing region 4b : and 
execution indication information storing region 4c 
were described as being provided in a non-volatile 

40 memory, though provided the storage of information 
can be maintained even when the power supply to 
the reproduction apparatus 21 is cut off, an EEP- 
ROM (Electrically Erasable Programmable Read 
Only Memory), a hard disk drive, or a rewritable op- 

45 tical disc drive and disc may be used. 

(b) The objects were described as including video 
information, audio information, and button data, al- 
though a control program and character information 

so may also be included. Each set of button data was 
also described as including a button image, al- 
though one set of button data may include a plurality 
of button images. 

55 (c) Each set of button data was described as includ- 
ing a display time : a display position, a control com- 
mand, and execution condition information, al- 
though other information, such as a button surface 
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display image, button coloring information, and a 
button display control program may also be includ- 
ed. 

(d) The video information was described as includ- 5 
ing video data under MPEG2 format, although any 
kind of images for displaying the products on sale 
may be used. As another example of a video data 
format, MPEG1 may be used, as may stiil image 
formats such as JPEG (Joint Photographic Experts 10 
Group) or GIF (Graphics Interchange Format). The 
video information may also include plaintext, or oth- 
er data such as document data that was produced 
using an editor application and has been converted 

for display use. 75 

The display method for video information in the 
digital data, the display method for button images, 
the format of control commands related to image 
display, and the format of the control command for 
issuing a product order may all be given according 20 
to a markup language, such as HTML (Hypertext 
Markup Language) or XML (extensible Markup 
Language). 

(e) The audio information was described as includ- 25 
ing audio that had been compressed according to 
LPCM, although any kind of audio may be used to 
describe the products on sale. As examples, 
MPEG-Audio or AC 3 format may be used. 

30 



(f) In the first, second, and fourth embodiments, a 
broadcast wave is used to transmit the digital data 
to the reproduction apparatus 21 , although the dig- 
ital data may be transmitted to the reproduction ap- 
paratus 21 via a public network like an ISDN (Inte- 35 
grated Services Digital Network) or PSTN (Public 

Switched Telephone Network), or a private network Claims 
such as an Ethernet. It should be obvious that such 
network may be wired, using optical fibers or the 1. 
like, or wireless. 40 

(g) The digital data may be recorded onto a rewri- 
table medium, as in the third embodiment, and dig- 
ital data that has previously been recorded onto the 
medium may be updated using digital data received 45 
by a reception unit. By doing so, time information 
may be updated when the sale period ends. 

(h) The execution condition information was de- 
scribed using one of eight possible parental levels, so 
though other information may be used, such as any 
combination of one of more of (1 ) time information, 
operation history information, and/or region code in- 
formation stored by the reproduction apparatus, (2) 
a previously set credit limit, and/or (3) a program 55 
written in a programming language. 

(i) The embodiments describe a case where the in- 



put of a PIN is required to change the limitation in- 
formation, although any method for confirming that 
the user is the authorized person may be used. As 
examples, a physical key or fingerprint recognition 
may be used. 

(j) In the third embodiment, the optical disc used for 
storing the digital data was described as being a 
CD-ROM disc, although a DVD-ROM (Digital Ver- 
satile Disc Read Only Memory) or MO (Magneto- 
Optical) disc may be used. 

(k) The procedures executed by the control unit 5 
in the first to fourth embodiments that were de- 
scribed by means of the flowcharts in Figs. 9, 10, 
15, and 16 may be realized by a machine language 
program. Such machine language program may be 
recorded onto a storage medium and distributed 
and sold. This storage medium may be an IC (Inte- 
grated Circuit) card, an optical disc, or a floppy disc, 
for example, with the program recorded onto the 
storage medium being used after first being in- 
stalled into a standard computer. By executing the 
installed program, the standard computer can 
achieve the functions of the first to four embodi- 
ments. 

[0130] Although the present invention has been fully 
described by way of example with reference to accom- 
panying drawings, it is to be noted that various changes 
and modifications will be apparent to those skilled in the 
art. Therefore, unless such changes and modifications 
depart from scope of the present invention, they should 
be constructed as being include therein. 



A reproduction apparatus that reproduces digital 
data supplied by a business and transmits a product 
order to the business based on a user operation, 
the digital data including at least one image relating 
to a product to be ordered, 

the reproduction apparatus comprising: 
storage means including a storage region that 
stores a permitted level showing an extent to 
which user operations are permitted by the re- 
production apparatus; 

first receiving means for receiving a user oper- 
ation made by the user; 
reproducing means for reproducing, when the 
user operation received by the first receiving 
means relates to reproduction, an image in- 
cluded in the digital data based on the user op- 
eration; 

approving means for reading, when the user 
operation received by the first receiving means 
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is a product ordering operation, the permitted 
1 level from the storage region and for judging 
whether to approve the product ordering oper- 
ation based on the permitted level; and 
product order transmitting means for transmit- 
ting, only when the approving means has ap- 
proved the product ordering operation, a prod- 
uct order to the business based on the product 
ordering operation. 

2. The reproduction apparatus of Claim 1 , 

wherein the storage region in the storage 
means is in a locked state where rewriting is 
not possible, 

the reproduction apparatus further comprising: 
judging means for judging, when the user op- 
eration received by the first receiving means is 
a rewriting operation for the storage region, 
whether a user who made the user operation is 
authorized; 

second receiving means for changing, when 
the judging means has judged that the user is 
authorized, the storage region from the locked 
state to an unlocked state and receiving an op- 
eration setting a new permitted level; and 
writing means for writing, when the second re- 
ceiving means has received the new permitted 
level, the new permitted level into the storage 
region and then returning the storage region to 
the locked state. 

3. The reproduction apparatus of Claim 2, 

wherein the judging means includes: 
a receiving unit for receiving, when the user op- 
eration received by the first receiving means is 
a rewriting operation for the storage region, an 
input of a personal identification number (PIN) 
from the user; and 

a PIN judging unit for judging that the user is 
authorized when the inputted PIN is correct. 

4. The reproduction apparatus of Claim 2, 

wherein the digital data includes sets of button 
data, each set of button data corresponding to 
a different button to be displayed on an image 
included in the digital data, 
each set of button data including a control com- 
mand to be executed when the button corre- 
sponding to the button data is indicated, and 
one of the plurality of control commands in- 
structing the reproduction apparatus to transmit 
a product order to the business, 
the reproduction means including an arranging 
unit for arranging at least one button image onto 
an image included in the digital data, 
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the first receiving means including an indication 
receiving unit for receiving an indicating oper- 
ation that indicates one of the buttons arranged 
by the arranging unit, 

the approving means including a permission 
judging unit for referring to the permitted level 
and to a control content of the control command 
In a set of button data corresponding to a button 
image indicated by the indicating operation, 
and forjudging whether execution of the control 
command is permitted, and 
the product order transmitting means only 
transmitting a product order to the business 
when the control command in a set of button 
data corresponding to a button image indicated 
by the indicating operation relates to an order 
and the permission judging unit has judged that 
execution of the control command is permitted. 



20 s. The reproduction apparatus of Claim 4, 



wherein at least one control command instructs 
the reproduction apparatus to switch a display 
image, 

the permission judging unit referring, when the 
control command in a set of button data indi- 
cated by the indicating operation relates to re- 
production, a control content of the control com- 
mand and to the permitted level, and judging 
whether execution of the control command is 
permitted; 

the reproduction apparatus further comprising 
reproduction control means for controlling, 
when the permission judging unit judges that 
execution of the control command is permitted, 
the reproducing means to switch the display im- 
age. ' 
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6. The reproduction apparatus of Claim 5, 

wherein an importance of a control content of 
each control command is expressed as a level 
PL1 out of n possible values, where n>2, 
each set of button data in the digital data being 
associated with a level PL1, 
the permitted level being expressed as a one 
of n values of level PL2, 

the permission judging unit judging whether the 
level PL1 of a control command included in a 
set of button data corresponding to the button 
image indicated by an indicating operation is no 
greater than the level PL2 of the permitted level 
stored in the storage region, and by doing so 
judging whether execution of the control com- 
mand is permitted. 

7. The reproduction apparatus of Claim 5, 
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wherein an evaluation function f(x) is assigned 
*to the digital data, where x is an identification 
number of each set of button data, 
the permitted level being a threshold for an out- 
put value of the function f(x), s 
the permission judging unit judging whether an 
output value y of the evaluation function f(x) ex- 
ceeds the threshold shown by the permitted 
value to judge whether execution of a control 
command is permitted, and io 
the output value y being an output value ob- 
tained when an identification number of a set 
of button data whose button image is indicated 
by the indicating operation received by the in- 
dication receiving unit. 75 

8. The reproduction apparatus of Claim 7, 

wherein each set of button data in the digital 
data includes an output value obtained by in- 20 
putting the identification number of the set of 
button data into the evaluation function f(x). 

9. The reproduction apparatus of Claim 5, further com- 
prising: 25 

holding means for holding, when the permis- 
sion judging unit judges that execution of a con- 
trol command is not permitted, the control com- 
mand; and 30 
display means for generating, when the judging 
means judges that the inputted PIN is correct 
and a new permitted level written into the stor- 
age region by the writing means is higher than 
a previous permitted level, indications showing 35 
a product ordering content of each control com- 
mand held by the holding means and displaying 
the generated indications; and 
third receiving means for receiving, after the 
generated indications have been displayed, an *o 
operation made by the user to approve an ex- 
ecution of one of the control commands held by 
the holding means, 

the product order transmitting means transmit- 
ting, when the user has made an operation to 45 
approve a control command held in the holding 
means and the permission judging unit judges 
that execution of the control command is per- 
mitted, a product order to the business. 

so 



10, The reproduction apparatus of Claim 9, 

wherein the receiving means receives a delet- 
ing operation indicating a deletion of a control 
command, 55 
and the reproduction apparatus further com- 15. 
prises deletion means for deleting, when the re- 
ceiving means has received a deleting opera- 



tion, the control command indicated by the de- 
leting operation from the holding means. 

11. The reproduction apparatus of Claim 5, 

wherein the digital data is transmitted by the 

business using a broadcast wave, 

the reproduction apparatus further comprising 

broadcast receiving means for receiving the 

broadcast wave and separating only the digital 

data from the broadcast wave, 

the reproducing means reproducing the digital 

data separated by the broadcast receiving 

means, 

12. The reproduction apparatus of Claim 5, 

wherein the digital data is transmitted from the 
business to the reproduction apparatus on a 
network, 

the reproduction apparatus further comprising 
downloading means for downloading the digital 
data from the network, 

the reproducing means reproducing the digital 
data downloaded by the downloading means. 

13. The reproduction apparatus of Claim 5, 

wherein the digital data is distributed having 
been recorded onto a storage medium by the 
business, 

the reproduction apparatus further comprising 
reading means for loading the storing medium 
and reading the digital data from the storage 
medium, 

the reproducing means reproducing the read 
digital data. 

14. The reproduction apparatus of Claim 13, 

wherein the storage medium also records time 
information showing a period during which the 
digital data is valid, 

the reproduction apparatus further comprising 
a clock unit for measuring a present time, 
the permission judging unit reading the time in- 
formation recording on the storage medium, 
comparing the period shown by the time infor- 
mation with the present time measured by the 
clock unit, and, if the present time is outside the 
period, prohibiting an execution of all control 
commands relating to the digital data, regard- 
less of the permitted level stored by the storage 
means. 



A storage medium storing digital data including a 
plurality of images and a plurality of sets of button 
data corresponding to button images that are to be 
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arranged onto each of the plurality of images, 

each set of button data including a control com- 
mand to be executed when a pressing of a cor- 
responding button image has been detected 5 
and execution condition information showing a 
condition that needs to be satisfied by an inter- 
nal state ol a reproduction apparatus for the 
control command to be executed, 
one of the control commands instructing a re- 10 
production apparatus to transmit a product or- 
der to a business, the execution condition infor- 
mation associated to the one of the control 
commands being set at in accordance with an 
importance of a product ordered by the product 75 
order, so that a difficult condition needs to be 
satisfied by the internal state of the reproduc- 
tion apparatus for the one of the control com- 
mands to be executed. 

20 

16. A computer-readable storage medium storing a re- 
production program that reproduces digital data 
provided by a business and transmits a product or- 
der to the business based on a user operation, the 
digital data including at least one image related to 
a product to be ordered, and a computer that reads 
the reproduction program including a storage 
means with a storage region for storing a permitted 
level showing an extent to which user operations 
are permitted by the reproduction apparatus, 30 

the reproduction program comprising: 
a first receiving step for receiving a user oper- 
ation made by the user; 

a reproducing step for reproducing, when the 35 
user operation received by the first receiving 
step relates to reproduction, an image included 
in the digital data based on the user operation; 
an approving step for reading, when the user 
operation received by tho first receiving stop is *o 
a product ordering operation, the permitted lev- 
el from the storage region and for judging 
whether to approve the product ordering oper- 
ation based on the permitted level; and 
a product order transmitting step for transmit- 45 
ting, only when the approving step has ap- 
proved the product ordering operation, a prod- 
uct order to the business based on the product 
ordering operation. 

so 

17. The computer-readable storage medium of Claim 
16, 

wherein the storage region in the storage 
means is in a locked state where rewriting is ss 
not possible, 

the reproduction program further comprising: 
a judging step for judging, when the user oper- 



ation received by the first receiving step is a re- 
writing operation for the storage region, wheth- 
er a user who made the user operation is au- 
thorized; 

a second receiving step for changing, when the 
judging step has judged that the user is author- 
ized, the storage region from the locked state 
to an unlocked state and receiving an operation 
setting a new permitted level; and 
a writing step for writing, when the second re- 
ceiving step has received the new permitted 
level, the new permitted level into the storage 
region and then returning the storage region to 
the locked state. 

18, The computer-readable storage medium of Claim 
17, 

wherein the judging step includes: 
a receiving substep for receiving, when the user 
operation received by the first receiving step is 
a rewriting operation for the storage region, an 
input of a persona! identification number (PIN) 
from the user; and 

a PIN judging substep for judging that the user 
is authorized when the inputted PIN is correct. 

19. The computer-readable storage medium of Claim 
17, 

wherein the digital data includes sets of button 
data, each set of button data corresponding to 
a different button to be displayed on an image 
included in the digital data, 
each set of button data including a control com- 
mand to be executed when the button corre- 
sponding to the button data is indicated, and 
one of the plurality of control commands in- 
structing the rep roduction apparatus to transmit 
a product order to the business, 
the reproduction step including an arranging 
substep for arranging at least one button image 
onto an image included in the digital data, 
the first receiving step including an indication 
receiving substep for receiving an indicating 
operation that indicates one of the buttons ar- 
ranged by the arranging substep, 
the approving step including a permission judg- 
ing substep for referring to the permitted level 
and to a control content of the control command 
in a set of button data corresponding to a button 
image indicated by the indicating operation, 
and forjudging whether execution of the control 
command is permitted, and 
the product order transmitting step only trans- 
mitting a product order to the business when 
the control command in a set of button data cor- 
responding to a button image indicated by the 
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indicating operation relates to an order and the 
•permission judging substep has judged that ex- 
ecution of the control command is permitted. 

20. The computer-readable storage medium of Claim 
19, 

wherein at least one control command instructs 
the reproduction apparatus to switch a display 
image, 

the permission judging substep referring, when 
the control command in a set of button data in- 
dicated by the indicating operation relates to re- 
production, a control content of the control com- 
mand and to the permitted level, and judging 
whether execution of the control command is 
permitted; 

the reproduction program further comprising a 
reproduction control step for controlling, when 
the permission judging substep judges that ex- 
ecution of the control command is permitted, 
the reproducing step to switch the display im- 
age. 

21. The computer-readable storage medium of Claim 
20, 

wherein an importance of a control content of 
each control command is expressed as a level 
PL1 out of n possible values, where n>2, 
each set of button data in the digital data being 
associated with a level PL1 , 
the permitted level being expressed as a one 
of n values of level PL2, 
the permission judging substep judging wheth- 
er the level PL1 of a control command included 
in a set of button data corresponding to the but- 
ton image indicated by an indicating operation 
is no greater than the level PL2 of the permitted 
level stored in the storage region, and by doing 
so judging whether execution of the control 
command is permitted. 

22. The computer-readable storage medium of Claim 
20, 

wherein an evaluation function f(x) is assigned 
to the digital data, where x is an identification 
number of each set of button data, 
the permitted level being a threshold for an out- 
put value of the function f(x), 
the permission judging substep judging wheth- 
er an output value y of the evaluation function 
f (x) exceeds the threshold shown by the permit- 
ted value to judge whether execution of a con- 
trol command is permitted, and 
the output value y being an output value ob- 
tained when an identification number of a set 



of button data whose button image is indicated 
by the indicating operation received by the in- 
dication receiving substep. 

s 23. The computer-readable storage medium of Claim 
22, 

wherein each set of button data in the digital 
data includes an output value obtained by in- 
putting the identification number of the set of 
button data into the evaluation function f(x). 

24. The computer-readable storage medium of Claim 
20, 

wherein the reproduction program further com- 
prises: 

a storing step for storing, when the permission 
judging substep judges that execution of a con- 
trol command is not permitted, the control com- 
mand into the storage region; 
a display step for generating, when the judging 
step judges that the inputted PIN is correct and 
a new permitted level written into the storage 
region by the writing step is higher than a pre- 
vious permitted level, indications showing a 
product ordering content of each control com- 
mand stored by the storing step and displaying 
the generated indications; and 
a third receiving step for receiving, after the 
generated indications have been displayed, an 
operation made by the user to approve an ex- 
ecution of one of the control commands stored 
by the storing step, 

the product order transmitting step transmit- 
ting, when the user has made an operation to 
approve a control command stored held in the 
storing step and the permission judging sub- 
step judges that execution of the control com- 
mand is permitted, a product order to the busi- 
ness. 

25. The computer-readable storage medium of Claim 
24, 

wherein the receiving step receives a deleting 
operation indicating a deletion of a control com- 
mand, 

and the reproduction program further compris- 
es deletion step for deleting, when the receiving 
step has received a deleting operation, the con- 
trol command indicated by the deleting opera- 
tion from the storage region. 
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